There's an issue when configuring an extractor using regex + matched groups
After some tests, we've made it simply to show you the final error: The regex pattern is (Name1)|(Name2) So if Name1 exists, the result is Name1. And if Name2 exists, and there's no Name1, the result is Name2. Tests: - Message includes Name1 and not Name2: The result is Name1, correct. - Message includes Name1 and Name2: the result is Name1, correct. - Message includes not Name1 and not Name2: warning "Regular Expression did not match". We think is correct for now. - Message includes not Name1 and Name2: error "Could not try regular expression,Make sure that is valid". The result should have been Name2, instead we have an error. Maybe it's some bug? Or must be configured some other way? The pattern works if we test it, for example, on the regex-testing web regex101.com. Best, JM -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/21d4a60a-b601-4925-a433-d03f34e6e4b7%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
